GS-4210-24P2S

1

24-Port 10/100/1000T 802.3at PoE + 2-Port 100/1000X SFP Managed Switch

Cost-optimized Managed PoE+ Switch with Advanced L2/L4 Switching and

Security

PLANET GS-4210-24P2S is an ideal Gigabit PoE Switch which provides cost-effective

advantage to local area network and is widely accepted in the SMB office network. It

offers intelligent Layer 2 data packet switching and management functions, friendly web

user interface and stable operation. The model complies with IEEE 802.3at Power over

Ethernet Plus (PoE+) at an affordable price. The GS-4210-24P2S is equipped with 24

10/100/1000BASE-T Gigabit Ethernet ports and 2 100/1000BASE-X SFP interfaces with

inner power system. Its 24 Gigabit Ethernet ports integrated with 802.3at PoE+ injector

function on all ports. It offers a rack-mountable, affordable, safe and reliable power

solution for SMBs deploying Power over Ethernet networks, or requiring enhanced data

security and network traffic management.

Built-in Unique PoE Functions for Powered Devices Management

As the PoE managed switch for surveillance, wireless and VoIP networks, the GS-4210-

24P2S features special PoE management functions:

■ PD alive check

■ Scheduled power recycling

■ PoE schedule

■ PoE usage monitoring

Physical Port• 24-port 10/100/1000BASE-T Gigabit RJ45 copper• 2 100/1000BASE-X mini-GBIC/SFP slots• RJ45 console interface for switch basic management and setup

• Reset button for system factory default and reboot

Switching• Hardware-based 10/100Mbps, half/full duplex and 1000Mbps

full duplex mode, flow control and auto-negotiation, and auto MDI/MDI-X

• Features Store-and-Forward mode with wire-speed filtering and forwarding rates

• IEEE 802.3x flow control for full duplex operation and back pressure for half duplex operation

• 9K jumbo frame• Automatic address learning and address aging

• Supports CSMA/CD protocol

Power over Ethernet• Complies with IEEE 802.3at High Power over Ethernet• Complies with IEEE 802.3af Power over Ethernet• Up to 24 ports of IEEE 802.3af/802.3at devices powered• Supports PoE Power up to 30.8 watts for each PoE port• 300-watt PoE budget• Auto detects powered device (PD)• Circuit protection prevents power interference between ports• Remote power feeding up to 100 meters in standard mode and

250m in extend mode• PoE Management

– Total PoE power budget control – Per port PoE function enable/disable – PoE Port Power feeding priority – Per PoE port power limitation – PoE delay – PD classification detection

• Intelligent PoE features – PoE usage threshold control – PD alive check

– PoE schedule

Layer 2 Features• Prevents packet loss with back pressure (half-duplex) and IEEE

802.3x pause frame flow control (full-duplex)• High performance Store and Forward architecture, runt/CRC

filtering eliminates erroneous packets to optimize the network bandwidth

• Supports VLAN – IEEE 802.1Q tagged VLAN – Provider Bridging (VLAN Q-in-Q) support (IEEE 802.1ad)

24 x Gigabit 802.3at PoE PortsPoE & Speed, LNK/ACT Status

Power LED RJ45 Console Port

Reset Button 2 x 100/1000X SFP Slots

100/1000X SFP LNK/ACT Status

GS-4210-24P2S

2

Intelligent Powered Device Alive Check

The GS-4210-24P2S can be configured to monitor connected PD (powered device)

status in real time via ping action. Once the PD stops working and responding, the GS-

4210-24P2S will resume the PoE port power and bring the PD back to work. It will

greatly enhance the network reliability through the PoE port resetting the PD’s power

source and reducing administrator management burden.

Scheduled Power Recycling

The GS-4210-24P2S allows each of the connected PoE IP cameras or PoE wireless

access points to reboot at a specific time each week. Therefore, it will reduce the chance

of IP camera or AP crash resulting from buffer overflow.

PoE Schedule for Energy Saving

Under the trend of energy saving worldwide and contributing to environmental protection,

the GS-4210-24P2S can effectively control the power supply besides its capability of

giving high watts power. The “PoE schedule” function helps you to enable or disable

PoE power feeding for each PoE port during specified time intervals and it is a powerful

function to help SMBs or enterprises save power and money. It also increases security

by powering off PDs that should not be in use during non-business hours.

– Protocol VLAN – Voice VLAN – Private VLAN – Management VLAN – GVRP

• Supports Spanning Tree Protocol – STP (Spanning Tree Protocol) – RSTP (Rapid Spanning Tree Protocol) – MSTP (Multiple Spanning Tree Protocol) – STP BPDU Guard, BPDU Filtering and BPDU Forwarding

• Supports Link Aggregation – IEEE 802.3ad Link Aggregation Control Protocol (LACP) – 1 LACP group, up to 2 ports per LACP group – Cisco ether-channel (static trunk) – 1 trunk group, up to 2 ports per trunk group

• Provides port mirror (many-to-1)

• Loop protection to avoid broadcast loops

Quality of Service• Ingress/Egress Rate Limit per port bandwidth control• Storm Control support

– Broadcast/unknown unicast/unknown multicast• Traffic classification

– IEEE 802.1p CoS – TOS/DSCP/IP precedence of IPv4/IPv6 packets

• Strict priority and Weighted Round Robin (WRR) CoS policies

Multicast• Supports IPv4 IGMP snooping v2 and v3• Supports IPv6 MLD snooping v1, v2• IGMP querier mode support• IGMP snooping port filtering

• MLD snooping port filtering

Security• Authentication

– IEEE 802.1X port-based network access authentication – Built-in RADIUS client to co-operate with the RADIUS servers

– DHCP Option 82 – RADIUS/TACACS+ login user access authentication

• Access Control List – IPv4/IPv6 IP-based ACL – IPv4/IPv6 IP-based ACE – MAC-based ACL – MAC-based ACE

• MAC Security – Static MAC – MAC Filtering

• Port security for source MAC address entries filtering• DHCP snooping to filter distrusted DHCP messages• Dynamic ARP Inspection discards ARP packets with invalid

MAC address to IP address binding• IP source guard prevents IP spoofing attacks• DoS attack prevention

• SSH/SSL

Management• IPv4 and IPv6 dual stack management

PT PoE Camera

Ping Request

Ping Request

Check alive status for 3 times

Restart PoE device if without response

Ping Echo

No Response......

PD Alive!!

Step 1

Step 3

Step 2

Step 4

ON

PoE

ONON

PoE

OFF

PD StatusGood!!

Alarm Notification

S M T W T F S

Automatically RebootEvery Friday 23:00

PoE PT CameraON ON

PoE

OFF

CPU/BufferLoad 85%

CPU/BufferLoad 10%

Power On

Power On

Power On

Power On

6 Watts 6 Watts 12 Watts 12 Watts

PoE PoE PoE PoE

Power Off

Power Off

Power Off

Power On

6 Watts 6 Watts 12 Watts 12 Watts

PoE PoE PoE PoE

PoE 1000BASE-T UTP with PoE

Total consumption of 36 watts/hr

5PM8AM 5PM 8AM

Save 24 watts/hr during off-business hours Total Saved = 10800 Watts/month

GS-4210-24P2S

3

PoE Usage Monitoring

Via the power usage chart in the web management interface, the GS-4210-24P2S

enables the administrator to monitor the status of the power usage of the connected PDs

in real time. Thus, it greatly enhances the management efficiency of the facilities.

IPv6/IPv4 Dual Stack

Supporting both IPv6 and IPv4 protocols, the GS-4210-24P2S helps the SMBs to step in

the IPv6 era with the lowest investment as its network facilities need not be replaced or

overhauled if the IPv6 FTTx edge network is set up.

Robust Layer 2 Features

The GS-4210-24P2S can be programmed for advanced switch management functions

such as dynamic port link aggregation, 802.1Q VLAN and Q-in-Q VLAN, Multiple

Spanning Tree protocol (MSTP), loop and BPDU guard, IGMP snooping, and MLD

snooping. Via the link aggregation, the GS-4210-24P2S allows the operation of a high-

speed trunk to combine with multiple ports such as a 4Gbps fat pipe, and supports fail-

over as well. Also, the Link Layer Discovery Protocol (LLDP) is the Layer 2 protocol

included to help discover basic information about neighboring devices on the local

broadcast domain.

• Switch management interface – Web switch management – Telnet command line interface – SNMP v1, v2c and v3 – SSH and SSL secure access

• User privilege levels control• Built-in Trivial File Transfer Protocol (TFTP) client• BOOTP and DHCP for IP address assignment• System maintenance

– Firmware upload/download via HTTP/TFTP – Configuration upload/download through web interface – Dual images – Hardware reset button for system reboot or reset to factory default

• SNTP Network Time Protocol• Cable diagnostics• Link Layer Discovery Protocol (LLDP) and LLDP-MED• SNMP trap for interface link up and link down notification• Event message logging to remote Syslog server• Four RMON groups (history, statistics, alarms and events) • PLANET smart discovery utility

Efficient Traffic Control

The GS-4210-24P2S is loaded with robust QoS features and powerful traffic management to enhance services to business-class data, voice, and video

solutions. The functionality includes broadcast/multicast/unicast storm control, per port bandwidth control, 802.1p/CoS/IP DSCP QoS priority and remarking.

It guarantees the best performance at VoIP and video stream transmission, and empowers the enterprises to take full advantages of the limited network

resources.

Enhanced and Secure Management

For efficient management, the GS-4210-24P2S is equipped with console, web, telnet and SNMP management interfaces. With the built-in web-based

management interface, the GS-4210-24P2S offers an easy-to-use, platform-independent management and configuration facility. By supporting standard

Simple Network Management Protocol (SNMP), the switch can be managed via any standard management software. For text-based management, the

switch can be accessed via telnet and the console port. Moreover, the GS-4210-24P2S offers secure remote management by supporting SSH, HTTPS and

SNMPv3 connections which encrypt the packet content at each session.

Powerful Security

PLANET GS-4210-24P2S offers comprehensive IPv4/IPv6 Layer 2 to Layer 4 Access Control List (ACL) for enforcing security to the edge. It can be used to

restrict network access by denying packets based on source and destination IP address, TCP/UDP ports or defined typical network applications. Its protection

mechanism also comprises 802.1X port-based user and device authentication, which can be deployed with RADIUS to ensure the port level security and

block illegal users. With the protected port function, communication between edge ports can be prevented to guarantee user privacy. Furthermore, Port

security function allows to limit the number of network devices on a given port.

Advanced Network Security

The GS-4210-24P2S also provides DHCP snooping, IP source guard and dynamic ARP inspection functions to prevent IP snooping from attack and discard

ARP packets with invalid MAC address. The network administrators can now construct highly-secure corporate networks with considerably less time and

effort than before.

Flexible Extension Solution

The two mini-GBIC slots built in the GS-4210-24P2S are compatible with the 100BASE-FX/1000BASE-SX/LX SFP (Small Form-factor Pluggable) fiber

transceiver to uplink to backbone switch and monitor center in long distance. The distance can be extended from 550 meters to 2km (multi-mode fiber)

and to 10/20/30/40/50/60/70/120 kilometers (single-mode fiber or WDM fiber). They are well suited for applications within the enterprise data centers and

distributions.

GS-4210-24P2S

4

Perfectly-Integrated Solution for PoE IP Surveillance

The GS-4210-24P2S brings an ideal, secure surveillance system at a lower total cost. The GS-4210-24P2S provides 24 10/100/1000Mbps 802.3at PoE+

ports able to feed sufficient PoE power for 24 IEEE 802.3af/IEEE 802.3at PoE IP cameras at the same time. It is also able to connect with one 16-channel

NVR or two 8-channel NVR systems, uplink to the backbone switch and the monitoring center. With such a high-performance switch architecture, the

recorded video files from the PoE IP cameras can be saved in the NVR system to enable the administrators to control and monitor the surveillance images

both in the local LAN and the remote sites.

Department/Workgroup PoE Network

Providing 24 PoE in-line power interfaces, the GS-4210-24P2S can easily build a power that centrally controls IP phone system, IP camera system and

wireless AP group for enterprises. The GS-4210-24P2S delivers full ports of 802.3af/at compliant Gigabit Ethernet network connectivity with high-performance

and cost-effective advantages for the increasing number of PoE IP telephones, PoE IP cameras, PoE wireless access points and other devices applied at

the edge of the small or medium enterprise network. The GS-4210-24P2S improves the network efficiency and protects the network clients with the powerful

features:

• Layer 2 to Layer 4 security

• QoS/802.1Q VLAN/static trunk/LACP

• 802.1x port-based and MAC-based network access authentication security

• Multicast IGMP snooping

Applications

802.1Q VLAN

QoS

Port TrunkPoE IP Camera PoE Wireless AP

PoE VoIP PCPC

PCPC

PCPCPCPC

GS-4210-24P2S

BackboneSwitch

Management ClientWeb Management

PoE

PoE

GS-4210-24P2S

GS-4210-24P2S

1000

1000

1000BASE-SX/LX Fiber-optic1000

1000BASE-T UTP

PoE 1000BASE-T UTP with PoE

PoE IP Camera

PoE IP Camera

PoE IP Camera

PoE IP Camera

IP Camera

IP Camera

PoE Splitter

PoE Splitter

Campus

1000BASE-T UTP

Non-PoE Camera802.3at PoE IP Camera

802.3af PoE IP CameraCenter of Surveillance

NVRPC

PoE

PoE

PoE

PoE

PoE PoE

DC Power Line (DC)

DC

DC

PoE 1000BASE-T UTP with PoE

GS-4210-24P2S

GS-4210-24P2S

5

Specifications

Product GS-4210-24P2SHardware Specifications Hardware Version 2Copper Ports 24 x 10/100/1000BASE-T RJ45 Auto-MDI/MDI-X PortsPoE Injector Port 24 802.3af/802.3at PoE Injector PortsSFP/mini-GBIC Slots 2 100/1000BASE-X SFP interfaces, supporting 100/1000Mbps dual modeConsole 1 x RS-232-to-RJ45 serial port (115200, 8, N, 1)Switch Architecture Store-and-Forward Switch Fabric 52Gbps/non-blockingSwitch Throughput@64 bytes 38.6Mpps @64 bytesMAC Address Table 8K entries Shared Data Buffer 4.1 megabits

Flow Control IEEE 802.3x pause frame for full-duplexBack pressure for half-duplex

Jumbo Frame 9216 bytes

Reset Button < 5 sec: System reboot> 5 sec: Factory default

LED

System:Power (Green)10/100/1000T RJ45 Interfaces (Port 1 to Port 24):1000 LNK/ACT (Green), 10/100 LNK/ACT (Orange), PoE (Orange)100/1000Mbps SFP Interfaces (Port 25 to Port 26):1000 LNK/ACT (Green), 100 LNK/ACT (Orange)

Thermal Fan 2Power Requirements 100~240V AC, 50/60Hz, 4A (max.)Power Consumption/Dissipation Max. 330 watts/1122 BTUDimensions (W x D x H) 445 x 207 x 45 mm (1U height)Weight 2.8kgEnclosure MetalPower over Ethernet

PoE Standard IEEE 802.3af Power over Ethernet/PSEIEEE 802.3at Power over Ethernet Plus/PSE

PoE Power Output Per Port 52V DC, 300mA. Max. 15.4 watts (IEEE 802.3af)Per Port 52V DC, 600mA. Max. 30 watts (IEEE 802.3at)

PoE Power Budget 300 wattsNumber of PDs, 7 watts 24Number of PDs, 15.4 watts 19Number of PDs, 30 watts 9Layer 2 Functions

Port Mirroring TX/RX/bothMany-to-1 monitor

VLAN

802.1Q tagged-based VLAN Up to 256 VLAN groups, out of 4094 VLAN IDs802.1ad Q-in-Q tunnelingVoice VLANProtocol VLANPrivate VLAN (Protected port)GVRPManagement VLAN

Link Aggregation IEEE 802.3ad LACP supports 1 group of 2-port trunk and static trunk supports 1 group of 2-port trunk

Spanning Tree ProtocolIEEE 802.1D Spanning Tree Protocol (STP)IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)

IGMP SnoopingIGMP (v2/v3) snoopingIGMP querierUp to 256 multicast groups

MLD Snooping IPv6 MLD (v1/v2) snooping, up to 256 multicast groups

Access Control List IPv4/IPv6 IP-based ACL/MAC-based ACLPv4/IPv6 IP-based ACE/MAC-based ACE

QoS

8 mapping IDs to 8 level priority queues - Port number - 802.1p priority- DSCP/IP precedence of IPv4/IPv6 packetsTraffic classification based, strict priority and WRRIngress/Egress Rate Limit per port bandwidth control

GS-4210-24P2S

6

Security

IEEE 802.1X port-based authenticationBuilt-in RADIUS client to cooperate with RADIUS serverRADIUS/TACACS+ authenticationIP-MAC port bindingMAC filteringStatic MAC addressDHCP snooping and DHCP Option82STP BPDU guard, BPDU filtering and BPDU forwardingDoS attack preventionARP inspectionIP source guardStorm control supportBroadcast/unknown unicast/unknown multicast

Management Functions

Basic Management Interfaces

RJ45 Console; Web browser; Telnet; SNMP v1, v2c, v3Firmware upgrade by HTTP/TFTP Protocol through Ethernet networkConfiguration upload/download through HTTP/TFTPRemote/Local SyslogSystem logLLDP Protocol SNTPPLANET Smart Discovery Utility

Secure Management Interfaces HTTPs, SNMP v3

SNMP MIBs

RFC 3635 Ethernet-like MIBRFC 2863 Interface Group MIBRFC 2819 RMON (1, 2, 3, 9)RFC 1493 Bridge MIB

Standards Conformance Regulatory Compliance FCC Part 15 Class A, CE

Standards Compliance

IEEE 802.3 10BASE-TIEEE 802.3u 100BASE-TX/100BASE-FXIEEE 802.3z Gigabit SX/LXIEEE 802.3ab Gigabit 1000TIEEE 802.3x flow control and back pressureIEEE 802.3ad port trunk with LACPIEEE 802.1D Spanning Tree ProtocolIEEE 802.1w Rapid Spanning Tree ProtocolIEEE 802.1s Multiple Spanning Tree ProtocolIEEE 802.1p Class of ServiceIEEE 802.1Q VLAN taggingIEEE 802.1x Port Authentication Network ControlIEEE 802.1ab LLDPIEEE 802.3af Power over EthernetIEEE 802.3at Power over Ethernet PlusRFC 768 UDPRFC 793 TFTPRFC 791 IPRFC 792 ICMPRFC 2068 HTTPRFC 1112 IGMP version 1RFC 2236 IGMP version 2RFC 3376 IGMP version 3RFC 2710 MLD version 1RFC 3810 MLD version 2

Environment

Operating Temperature: 0 ~ 50 degrees CRelative Humidity: 5 ~ 95% (non-condensing)

Storage Temperature: -10 ~ 70 degrees CRelative Humidity: 5 ~ 95% (non-condensing)

GS-4210-24P2SPLANET reserves the right to change specifications without prior notice. All brand names and trademarks are property of their respective owners. Copyright © 2017 PLANET Technology Corp. All rights reserved.

11F., No.96, Minquan Rd., Xindian Dist., New Taipei City 231, Taiwan (R.O.C.)Tel: 886-2-2219-9518 Fax: 886-2-2219-9528Email: sales@planet.com.tw www.planet.com.tw

PLANET Technology Corporation

GS-4210-24P2S

7

Related PoE Products

Available Gigabit SFP Modules for GS-4210-24P2S

Available Fast Ethernet SFP Modules for GS-4210-24P2S

ICA-2250VT Industrial PoE Plus Outdoor IR IP CameraICA-3250V Full HD Outdoor IR PoE IP CameraICA-4200V Full HD 20M IR Vari-focal Dome IP CameraICA-4500V 5 Mega-pixel 20M IR Vari-focal Dome IP CameraICA-E3550V 5 Mega-pixel Bullet IR PoE IP CameraICA-E5550V 5 Mega-pixel Vandalproof IR PoE IP CameraICA-E8550 5 Mega-pixel Outdoor IR PoE Fisheye IP CameraICA-HM351 2 Mega-pixel 35M IR Outdoor Box PoE IP CameraPOE-162S IEEE 802.3at Gigabit High Power over Ethernet SplitterPOE-E201 IEEE 802.3at Power over Ethernet ExtenderWNAP-C3220A 802.11n Wireless Ceiling-mount PoE Access PointWNAP-W2201A 802.11n 300Mbps In-Wall Access Point w/USB Charger (EU Type)WDAP-C7200AC 1200Mbps 802.11ac Dual Band Ceiling-mount Wireless Access PointWDAP-W7200AC 1200Mbps 802.11ac Dual Band Wall-mount Wireless Access PointVIP-5060PT Professional HD PoE IP Phone (6-Line)

MGB-GT SFP-Port 1000BASE-T ModuleMGB-SX SFP-Port 1000BASE-SX mini-GBIC module - 220/550mMGB-LX SFP-Port 1000BASE-LX mini-GBIC module - 10kmMGB-L30 SFP-Port 1000BASE-LX mini-GBIC module - 30kmMGB-L50 SFP-Port 1000BASE-LX mini-GBIC module - 50kmMGB-L70 SFP-Port 1000BASE-LX mini-GBIC module - 70kmMGB-L120 SFP-Port 1000BASE-LX mini-GBIC module - 120kmMGB-LA10 SFP-Port 1000BASE-LX (WDM,TX:1310nm) mini-GBIC module - 10kmMGB-LB10 SFP-Port 1000BASE-LX (WDM,TX:1550nm) mini-GBIC module - 10kmMGB-LA20 SFP-Port 1000BASE-LX (WDM,TX:1310nm) mini-GBIC module - 20kmMGB-LB20 SFP-Port 1000BASE-LX (WDM,TX:1550nm) mini-GBIC module - 20kmMGB-LA40 SFP-Port 1000BASE-LX (WDM,TX:1310nm) mini-GBIC module - 40kmMGB-LB40 SFP-Port 1000BASE-LX (WDM,TX:1550nm) mini-GBIC module - 40km

MFB-FX SFP-Port 100BASE-FX Transceiver (1310nm) - 2kmMFB-F20 SFP-Port 100BASE-FX Transceiver (1310nm) - 20kmMFB-F40 SFP-Port 100BASE-FX Transceiver (1310nm) - 40kmMFB-F60 SFP-Port 100BASE-FX Transceiver (1310nm) - 60kmMFB-FA20 SFP-Port 100BASE-BX Transceiver (WDM,TX:1310nm) - 20kmMFB-FB20 SFP-Port 100BASE-BX Transceiver (WDM,TX:1550nm) - 20km

GS-4210-24P2S 24-Port 10/100/1000T 802.3at PoE + 2-Port 100/1000X SFP Managed Switch

Ordering Information